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Preface 


This  educational  materials  package  has  been  developed  for  instructors  of  software 
engineering  and,  more  specifically,  real-time  rystems.  This  package  will  help  instructors  teach 
rate  monotonic  analysis  (RMA)  to  graduate  and  undergraduate  software,  computer,  and 
electrical  engineering  students.  The  package  can  also  be  used  to  teach  RMA  to  continuing 
education  students.  The  presentation  materials  and  exercises  included  have  been  used  by 
Ruth  Ravenel  in  both  graduate  and  undergraduate  courses. 

Since  RMA  has  only  recently  been  applied  to  real-time  designs  to  analyze  whether  a  system 
will  meet  timing  requirements,  RMA  is  not  yet  covered  in  standard  textbooks.  A  handbook  now 
exists,  A  Practitioner’s  Handbook  for  Real-Time  Analysis  [Klein  93]  that  steps  engineers 
through  the  application  of  RMA  to  various  real-time  situations;  however,  the  handbook  is  an 
advanced  text  for  people  who  have  already  been  introduced  to  RMA.  This  serves  as 
introductory  material  to  RMA. 

These  educational  materials  are  intended  to  be  used  in  conjunction  with  the  videotape.  An 
Introduction  to  Rate  Monotonic  Analysis,  from  the  SEI  Technology  Series.  (For  instructors  who 
have  not  already  obtained  the  videotape  from  the  SEI,  an  order  form  is  included  in  this 
package.) 

This  educational  materials  package  consists  of  the  following  materials; 

•  79-minute  instructional  videotape.  An  Introduction  to  Rate  Monotonic 
Analysis  (to  obtain,  use  attached  order  form) 

•  Instructor's  guide  (this  document),  including 

•  educational  objectives  and  recommendations  for  use 

-  outline  of  videotaped  lecture 

•  bibliography 

-  lecture  notes 

-  background  on  RMA 

-  discussion  on  the  distinction  between  real-time  systems  and  other 
systems 

-  added  detailed  explanations  on  selected  concepts  (not  in  videotape) 

-  sample  homework  assignments  with  answers  and  explanations 

-  sample  exam  question  with  answer  and  explanation 

•  (Optional)  Presentation  slides  used  in  videotaped  presentation  (see  section 
3.4).  These  slides  can  be  obtained  two  ways: 

-  diskette  containing  PowerPoint  files  [Macintosh  version  2.0.1]  (to 
obtain,  use  attach^  order  form) 

-  anonymous  FTP  of  PostScript  files 

•  (Optional)  Non-supported  C  programs  (see  section  3.5).  These  slides  can 
be  obtained  two  ways: 

-  diskette  containing  source  code  in  text  files  (to  obtain,  use  attached 
order  form  and  memorandum  of  agreement) 

-  SEI  world  wide  web  server,  via  Mosaic 
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Introduction 


With  the  burgeoning  use  of  microprocessors  in  commonplace  products,  there  is  an  ever- 
increasing  need  for  software  developers  to  understand  the  issues  involved  in  real-time  system 
design.  This  introduction  will  not  educate  a  developer  sufficiently  to  be  proficient,  nor  is  it 
intended  to  do  so.  But  it  can  introduce  the  key  concepts  in  sufficient  depth  to  motivate  the 
student  to  learn  more  when  the  need  arises.  It  is  packaged  compactly  so  that  it  will  not  occupy 
an  undue  portion  of  a  course  and  can  therefore  be  inserted  in  courses  in  software  engineering, 
systems  design,  or  real-time  systems. 

Typically,  textbook  discussions  of  real-time  system  design  give  heuristics  based  on 
experience  and  intuition  without  recourse  to  science  or  mathematics  as  an  aid.  Now  that  the 
mathematical  foundation  has  been  developed,  it  is  possible  to  replace  intuitive  heuristic 
approaches  with  genuinely  substantive  material  for  use  in  master’s  level  graduate  courses 
and  also  undergraduate  courses.  Those  who  already  had  the  years  of  experience  and  have 
learned  about  RMA  in  a  graduate  course  have  reported  that  they  found  its  application  of  great 
benefit  upon  returning  to  their  employment. 


2  Educational  Objectives 

Upon  completion  of  the  RMA  unit,  students  should 

•  Understand  the  key  issues  that  make  the  design  of  real-time  systems 
different  from  the  design  of  other  systems,  including  interactive  time¬ 
sharing  systems. 

•  Understand  that  guaranteeing  the  schedulability  of  a  set  of  real-time  tasks 
is  not  only  possible,  but  also  mathematically  simple. 

•  Understand  that  the  applicability  of  RMA  has  been  broadened  to  a  wide 
range  of  task  characteristics  and  that  RMA  is  therefore  useful  in  the  design 
and  evaluation  of  practical  real-time  systems. 

•  Know  essential  vocabulary  necessary  for  reading  other  sources  for  further 
study  of  this  topic 

More  specifically,  students  should  be  able  to 

•  Evaluate  a  set  of  real-time  tasks  to  determine  whether  they  meet  the  criteria 
for  application  of  RMA. 

•  Apply  RMA  principles  to  determine  whether  a  set  of  tasks  is  schedulable; 
that  is,  to  determine  whether  one  can  guarantee  that  all  tasks  will  be  able 
to  meet  their  deadlines,  even  in  worst-case  conditions. 

•  Extend  RMA  principles  to  handle  certain  deviations  from  basic  criteria 
required  for  RMA  application.  In  particular,  students  should  be  able  to 
extend  RMA  principles  to  handle  tasks  that  are  aperiodic,  that  share  a 
common  resource  (not  independent),  that  have  preperiod  deadlines,  or  that 
are  interrupt-driven. 
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3  Recommendations  for  Use 

3.1  including  RMA  in  a  Course 

The  RMA  unit  has  already  been  included  in  two  kinds  of  graduate-level  courses.  First,  in  a 
master’s  level  course  in  software  engineering,  the  RMA  unit  was  in  the  section  on  design  and 
followed  lectures  on  design  fundamentals  and  data  flow-oriented  design  It  could  have  been 
inserted  immediately  after  the  design  fundamentals  lecture.  Students  in  the  course  were  from 
computer  science,  electrical  and  computer  engineering,  and  software  engineering  graduate 
programs.  There  were  also  individuals  from  industry  taking  the  course  for  their  continuing 
education. 

Second,  the  RMA  unit  has  been  included  in  a  master’s  level  course  in  real-time  hardware- 
software  system  design.  It  was  found  to  fit  well  after  the  topics  of  synchronization, 
parallelization,  real  time  kernels,  and  basic  scheduling  issues. 

The  videotape  (to  obtain,  use  attached  order  form)  is  79  minutes  and  is  divided  as  follows; 
Introduction; 

•  Approximately  9  minutes 

•  Introduces  the  concepts  of  real-time  systems  development. 

Basic  theory  through  examples: 

•  Approximately  20  minutes 

•  Reviews  the  two  basic  theorems  that  are  used  to  test  the  ability  of  real-time 
tasks  to  meet  timing  requirements. 

Some  extensions  to  basic  theory: 

•  Approximately  20  minutes 

•  Extends  basic  theory  to  be  useful  on  actual  systems. 

Extended  case  study: 

•  Approximately  26  minutes 

•  Reviews  an  example  of  an  actual  system  on  which  RMA  was  used  to 
troubleshoot  and  modify  in  order  to  meet  timing  requirements. 

A  possible  3-class  (50  minutes  per  class)  sequence  could  be 
Class  1 : 

•  Discussion  of  fundamentals  that  distinguish  real-time  systems  from  other 
types  of  systems  (not  included  on  video;  see  lecture  notes  provided  in  this 
package). 

•  Video:  Introduction  and  Basic  Theory  sections. 
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Class  2: 

•  Review  of  examples  from  video  or  work  on  some  additional  problems  that 
are  provided  in  this  package. 

•  Video:  section  on  Extensions. 

Class  3: 

•  Review  of  examples  of  extensions  from  the  video  or  work  on  some 
additional  problems  involving  extensions. 

•  Video;  section  on  the  case  study. 

It  is  of  course  possible  to  run  the  video  completely  in  two  class  sessions  with  time  for 
discussion  at  the  end  of  the  second  day.  However,  this  approach  has  not  been  found  to 
provide  the  same  level  of  student  retention  of  the  material. 

3.2  Lecture  Notes 

The  lecture  notes,  included  at  the  back  of  this  document,  are  provided  to  the  instructor  as 
additional  background  on  RMA.  Although  these  notes  are  intended  to  help  instructors,  the 
notes  are  designed  so  that  they  can  also  be  distributed  to  students. 

The  Background  on  RMA  section  reviews  some  history  of  RMA  and  explains  its  usefulness. 

The  discussion  on  What’s  Important  for  Real-Time  Systems  is  provided  as  basic  information 
on  real-time  systems  in  software  engineering.  If  this  unit  is  going  to  be  inserted  in  a  general 
software  engineering  course,  students  may  not  be  sufficiently  familiar  with  real-time  systems 
to  understand  how  these  design  issues  differ  from  issues  in  other  systems. 

Depending  on  the  mathematical  sophistication  of  the  student,  the  notation  in  Theorem  2  can 
be  quite  intimidating.  The  section  The  Mathematical  Notation  of  Theorem  2  is  a  step-by-step 
explanation  of  what  that  notation  indicates.  Theorem  2,  shown  below,  appears  in  the  video  as 
an  important  theorem  for  determining  schedulability  precisely.  Its  proof  is  in  a  paper  by 
Lehoczky,  Sha,  and  Ding  [Lehoczky  89],  While  the  video  explains  the  net  effect  of  this  theorem 
in  terms  of  a  timeline,  the  video  does  not  explain  how  the  timeline  approach  and  the  algebra 
are  describing  the  same  process. 

3.3  Sample  Homework  Assignments  and  Exam  Question 

The  following  homework  assignments  and  exam  question  are  included  at  the  back  of  this 
document.  The  homework  assignments  can  be  used  to  enhance  and  test  the  understanding 
of  students.  Two  equivalent  homework  assignments  are  provided.  One  could  be  given  to  fall 
classes,  and  the  second  to  spring  classes.  Note  that  each  assignment  asks  several  questions 
that  build  in  difficulty.  Determine  and  assign  the  indixridual  questions  as  appropriate,  based  on 
the  material  covered  in  each  lecture. 
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Included  for  each  homework  assignment  are 

•  Homework  handouts 

•  Answers 

•  Further  comments 

The  exam  question  can  be  used  to  test  the  understanding  of  students.  It  has  previously  been 
provided  to  students  as  one  of  five  questions,  three  of  which  would  be  answered  by  each 
student,  on  a  final  exam. 

Included  for  the  exam  question  are 

•  The  examination  question 

•  Answers 

•  Further  comments 

3.4  Presentation  Slides 

Instructors  who  choose  to  present  the  material  live  rather  than  use  the  videotaped  lecture  in 
class  can  obtain  the  slides  that  were  used  in  the  video.  These  slides  can  be  obtained  two 
ways: 

•  Original  slides  (as  presented  on  the  videotape)  were  developed  using 
PowerPoint  2.0.1  for  the  Macintosh.  Instructors  can  order  a  diskette  from 
the  SEI  containing  both  color  and  black-and-white  versions  of  the  slides  in 
PowerPoint  files.  These  PowerPoint  files  include  alt  slides  (both  textual  and 
graphic)  used  in  the  videotape. 

•  Those  that  do  not  have  access  to  PowerPoint  may  obtain  printed  slides  via 
anonymous  FTP  of  a  PostScript  file  called  em11slides.ps.  Printing  this  file 
produces  only  slides  that  employ  graphics.  Text  slides  are  not  included. 

Printing  this  PostScript  file  produces  32  pages. 

3.5  RMA  Programs 

Two  C  programs  that  apply  RMA  techniques  can  be  obtained.  They  are  available  via  Mosaic 
or  by  ordering  the  diskette  (which  contains  both  the  presentation  slides  and  the  programs). 
U.S.  Air  Force  policy  requires  that  a  memorandum  of  agreement  (MOA)  be  signed  before  code 
developed  under  U.S.  government  funds  can  be  provided  to  a  requester. 

To  obtain  the  code  on  diskette,  complete  the  order  form  and  the  attached  MOA,  and  send 
them  both  to  the  SEI.  You  will  receive  the  code  listed  below. 

To  obtain  the  code  using  Mosaic,  your  version  of  Mosaic  must  be  able  to  support  forms.  Open 
Mosaic  and  go  to  the  SEI  home  page  at  http J/www. sei.cmu.edu.  Click  on  Software 
Engineering  institute,  then  SEI  Publications,  then  Search  the  Annotated  Catalog.  Search 
using  the  keyword  emit.  Then  click  on  the  title  found.  Rate  Monotonic  Analysis  for  Real-Time 
Systems:  Instructor’s  Guide.  Click  on  Retrieve  accompanying  code.  You  will  see  the  MOA  as 
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a  form  that  you  can  fill  out  on  your  screen.  Complete  the  MO  A  and  click  on  the  Sign  button, 
and  the  code  will  be  sent  to  you  via  email.  You  will  receive  the  following  programs: 

•  C  Program  called  Busyperiod  test 

This  program  calculates  response  times  for  a  set  of  events  (or  tasks).  It  is 
based  on  Technique  5  in  A  Practitioner’s  Handbook  for  Real-Time  Analysis. 

•  C  Program  called  Overrun  test 

This  program  can  be  used  when  an  event  (or  task)  is  not  able  to  meet  a 
deadline,  it  will  identify  areas  where  execution  time  can  be  reduced  to 
eliminate  overrun. 

•  Sample  input 

This  is  an  example  of  the  input  required  to  run  the  supplied  programs. 


4  Pedagogical  Considerations 

Those  who  have  taught  this  r  terial  stress  the  importance  of  the  exercises  in  sealing  the 
learning  process.  Because  the  video  is  rather  fast-paced,  it  is  possible  for  students  to  find  the 
logical  presentation  of  the  material  quite  understandable  while  watching  the  video.  However, 
professors  have  found  that  students  do  not  grasp  subtle  but  important  points  until  they  attempt 
the  homework  assignments. 

Answers  and  comments  accompany  the  sample  homework  assignments  in  Appendix  B. 

For  a  course  in  real-time  systems  that  is  accompanied  by  a  semester  project,  it  is  highly 
recommended  that  A  Practitioners  Handbook  for  Real-Time  Analysis  [Klein  93]  be  available 
for  reference.  The  video  is  a  substantive  introduction  to  the  topic,  but  there  are  special  cases 
that  are  not  covered  in  the  video  and  yet  can  occur  in  a  student  lab  project.  The  RMA 
handbook  is  comprehensive  in  the  situations  it  discusses,  and  its  vocabulary  is  readily 
accessible  to  students  who  have  completed  this  unit.  With  some  guidance  from  the  handbook, 
a  student  can  understand  how  the  theory  is  extended  to  his  or  her  special  case  and  be  able 
to  proceed  with  the  design. 
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Lecture  Notes 


Permission  is  granted  to  make  and  distribute  copies  of  the  following  Lecture  Notes  for  noncommercial  purposes. 


Background  on  RMA 

1  What  to  RMA? 

Timing  behavior  is  important  to  all  computing  systems.  However,  real-time  systems  are 
distinguished  by  the  fact  that  strict  timing  behavior  is  included  in  the  performance 
requirements.  The  “correctness”  of  a  real-time  system  is  based  not  only  on  its  functionality,  but 
also  its  timeliness  with  respect  to  hard  deadlines.  Depending  on  the  application,  an  incorrect 
system  can  result  in  catastrophe  including  loss  of  life.  Therefore,  it  is  important  for  real-time 
system  developers  to  be  able  to  ensure  that  their  designs  will  meet  those  timing  requirements. 
Because  it  stresses  the  important  aspects  particular  to  real-time  systems,  rate  monotonic 
analysis  (RMA)  provides  the  real-time  systems  practitioner  with  this  capability.  For  example, 
unlike  time-sharing  systems  in  which  fairness  among  clients  is  favored,  RMA  focuses  on 
guaranteeing  that  critical  deadlines  will  always  be  met,  even  in  worst-case  loading,  at  the  risk 
of  starving  noncritical  tasks. 

RMA  is  a  mathematical  approach  that  can  help  ensure  that  a  real-time  system  meets  its 
performance  requirements.  RMA  provides  a  collection  of  quantitative  methods  and  algorithms 
that  allow  engineers  to  understand,  analyze,  and  predict  the  timing  behavior  of  their  designs. 

In  addition  to  ensuring  that  critical  deadlines  will  be  met,  RMA  can  also  help  ensure  that 
requirements  on  soft  deadlines  will  be  met.  It  gives  designers  a  scientific  approach  to 
identifying  potential  timing  problems  before  the  system  is  built,  as  well  as  helping  to 
troubleshoot  performance  problems  in  existing  systems.  With  the  use  of  RMA,  timing 
problems  can  be  identified  more  easily  and  with  greater  certainty  than  has  previously  been 
possible. 

Since  the  case  study  in  this  introductory  video  covers  only  the  software  tasks  of  an  embedded 
system,  it  is  easy  to  overlook  the  fact  that  RMA  can  be  applied  to  the  entire  system — 
hardware,  software,  clients,  resources,  etc.  Students  who  are  employed  in  the  development 
of  real-time  systems  will  no  doubt  want  to  know  that  industrial  training  on  more  extensive 
applications  of  RMA  is  available  from  commercial  trainers.  Interested  persons  can  contact  the 
SEI  for  up-to-date  information  about  trainers.  Also,  the  RMA  handbook,  A  Practitioner’s 
Handbook  for  Real  Time  Analysis  [Klein  93],  is  an  invaluable  resource  for  addressing  more 
advanced  concepts. 

2  Why  Study  RMA? 

With  the  burgeoning  use  of  microprocessors  in  commonplace  products,  there  is  an  ever- 
increasing  need  for  software  developers  to  understand  the  issues  involved  in  real-time  system 
design.  This  introduction  will  not  educate  a  developer  sufficiently  to  be  proficient,  nor  is  it 
intended  to  do  so.  But  it  can  introduce  the  key  concepts  in  sufficient  depth  to  motivate  the 
student  to  learn  more  when  the  need  arises.  It  is  packaged  compactly  so  that  it  will  not  occupy 
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an  undua  portton  of  a  coursa  and  can  thereto^e  be  <nsefie<3  n  coufses  <r  sottware  engmeef  n/j 
syatama  datign.  ex  raat-tima  systems 


Tyjxcatty.  textbook  discussions  of  real-time  system  des*^  give  neunstics  based  or-' 
expananca  and  intuition  without  recourse  to  sciertce  or  mathematics  as  an  aid  Now  that  the 
mathematical  foundabon  has  bean  developed,  it  is  possrfiie  to  replace  mtuitive  heuristic 
approaches  with  genuinely  substantive  material  tor  use  m  master  s  level  graduate  courses 
and  also  undergraduate  courses.  Those  who  already  had  the  years  of  expenerKe  and  have 
learned  about  RMA  in  a  graduate  course  have  reported  that  they  found  its  application  of  great 
benefit  t^xxi  returning  to  their  employment 

3  A  Bit  of  History 

Historically,  designers  of  real-time  systems  have  built  capacity  in  individual  components  to 
handle  high  throughput  and  high  speeds.  Then,  when  the  components  were  integrated,  the 
system  was  tested  to  see  if  it  met  the  timing  requirements.  If  not,  adjustments  were  made  to 
individual  components  and  the  system  was  tested  again.  Even  if  timing  requirements  were 
satisfied  in  the  tests  that  were  attempted,  there  was  no  guarantee  that  the  testers  had  been 
able  to  simulate  the  worst-case  situations. 

This  approach  has  been  very  unpredictable  and  very  costly.  IBM  was  interested  In  applying  a 
formal  mathematical  approach  to  system  design,  long  before  integration,  to  ensure  that  the 
system  would  meet  timing  requirements  when  built.  They  identified  a  scheduling  algorithm  that 
guaranteed  mathematically  that  a  set  of  tasks  would  meet  all  their  deadlines,  even  in  the 
worst-case  situations. 

The  methods  and  algorithms  of  RMA  are  based  on  a  theory  of  fixed-priority  scheduling  first 
discussed  in  a  1973  Journal  of  the  Association  for  Computing  Machinery  paper  by  Liu  and 
Layland  [Liu  73].  They  introduced  a  theorem  that  proved  the  schedulability  of  a  set  of 
concurrent  tasks.  However,  the  imposed  assumptions  were  much  too  restrictive  for  the 
approach  to  be  practical  in  today's  real-time  systems. 

In  1 982,  IBM  and  Carnegie  Mellon  University  (CMU)  initiated  a  joint  research  project  to  extend 
the  work  of  Liu  and  Layland.  In  1988,  the  CMU  Software  Engineering  Institute  (SEl), 
sponsored  by  the  U.S.  Department  of  Defense,  began  extending  this  theory  to  address  a 
broader  range  of  systems.  Today  RMA  is  useful  on  all  real-time  systems  and  has  been  applied 
in  several  industrial  development  efforts. 
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What's  Important  for  Roal-Tima  Systems 


Time-Share 

Systems 

Real-Time 

Systems 

Capacity 

High  throughput 

Schedulability 

Rasponsivenass 

Fast  avaraga  response 

Ensured  worst-case  latency 

Ovarioad 

Fairness 

Stability 

In  time-sharing  systems,  the  measures  of  merit  are  high  throughput,  fast  average  respor 
time,  and  fairness  to  all  the  users.  For  example,  in  an  interactive  airline  reservation  syster 
high  throughput  ensures  that  the  system  processes  as  many  reservations  per  hour  as 
possible;  fast  average  response  time  ensures  that,  most  of  the  time,  the  system  responds 
quickly  enough  to  satisfy  the  users;  and  fairness  ensures  that,  if  the  system  is  overloaded, 
every  user’s  requests  will  be  processed  and  each  user  will  suffer  roughly  the  same  amount 
from  the  system  degradation. 

On  the  other  hand,  a  real-time  system  will  have  critical  tasks  that  must  be  completed  before 
given  deadlines;  otherwise  the  system  is  at  risk  of  failure.  In  these  systems,  the  measures  of 
merit  are  schedulability,  ensured  worst-case  latency,  and  stability.  For  example  in  a  nuclear 
power  plant,  the  tasks  that  monitor  and  regulate  core  temperature  might  be  critical  tasks  that 
must  be  guaranteed  to  be  schedulable,  meaning  that  they  are  able  to  meet  their  given 
executing  deadlines.  We  must  be  able  to  determine  that  their  worst-case  latency  (that  is,  their 
worst-case  response  time  to  events,  such  as  temperature  changes)  must  be  acceptable. 
Finally,  in  the  case  of  overload,  the  system  must  continue  to  meet  these  tasks’  deadlines,  even 
if  other,  less  critical  system  tasks  must  be  starved  out. 
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The  Mathematical  Notation  of  Theorem  2 


Theorem  2:  n  independent  periodic  taeks  scheduled  rate  monotonicaily  always 
meet  their  deadlines  for  all  task  phasings  if  and  only  if 

Vi,  1  <  I  <  n,  min  V  C -4p-  <l 

j=i  *  ; 

{Km)zK. 

R  ={(/:,  m  )  1  1  <  A:  <  i,  m  =  1 .  Zl  } 

Note  that  n  refers  to  the  number  of  tasks;  C,  is  the  execution  time  of  task  j;  and  is  the  length 
of  task  k’s  period. 

The  theorem  tests  whether  each  task  within  the  task  set  is  able  to  meet  its  first  deadline  while 
accommodating  preemption  from  all  higher  priority  tasks. 

Before  explaining  Theorem  2  in  terms  of  the  algebraic  notation,  let  us  review  what  Theorem  2 
does  by  way  of  the  sample  problem.  To  do  that,  we  need  to  clarify  the  notion  of  a  scheduling 
point.  We  use  the  term  “scheduling  poinf  to  mean  a  point  at  which  new  work  is  scheduled  to 
run.  For  periodic  tasks,  the  beginning  of  a  task's  period  would  be  a  scheduling  point. 

Theorem  2  enumerates  each  scheduling  point  and  tests  to  see  if  all  previously  scheduled  work 
could  have  been  completed  by  that  point,  just  before  new  work  is  introduced.  That  is,  if  we 
consider  only  task  1 ,  where  its  period  T,  =  50,  and  task  2,  where  its  period  T^  =  120,  one  could 
test  task  2’s  ability  to  meet  its  first  deadline  by  checking  if  all  the  scheduled  work  couk  be 
completed  by  elapsed  time  t  =  50  (T1 ),  elapsed  time  t  =  1 00  (the  end  of  task  1  's  second  period, 
2T1),  or  elapsed  time  t  =  120  (the  end  of  task  2’s  first  period),  just  before  the  new  work  is 
introduced  at  those  points.  Notice  that  as  one  progresses  from  one  scheduling  point  to 
another,  the  “scheduled  work”  increases. 

Note  that  we  could  check  at  any  point  along  the  timeline  (from  0  to  the  deadline)  to  see  if  all 
the  scheduled  work  has  been  completed.  However,  we  only  check  at  the  scheduling  points 
because  the  result  would  change  only  as  new  work  is  introduced. 

In  the  sample  problem  shown  in  the  video,  there  are  3  tasks.  They  have  periods  of  100  msec, 
150  msec,  and  350  msec,  respectively.  The  question  for  Theorem  2  is  whether  each  task  is 
able  to  complete  its  execution  before  its  first  deadline  while  accommodating  any  preemption. 
Theorem  2  enumerates  each  scheduling  point  for  a  given  task  and  checks  if  all  of  the  work 
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already  scheduled  can  be  completed  before  that  scheduling  point,  when  new  work  will  be 
introduced.  The  proof  of  Theorem  2  demonstrates  that  the  condition  is  necessary  for 
schndulabiiity. 

In  the  sarr^  problem,  the  scheduling  points,  ordered  chronologically,  are  100, 150, 200,  300. 
arnj  350  —  which  are  T,,  Tj,  2T,,  2T2  =  3T,  and  T,,  respectively.  All  3  tasks  are  scheduled  to 
run  at  t  =  0.  At  t  =100,  task  1  is  scheduled  to  run  again.  At  t  =  1 50,  task  2  is  scheduled,  and  so 
on.  If  we  were  to  apply  Theorem  2  to  task  i  =  3,  we  would  ask  whether 

C|  +  C;  +  Cj  £  Tj 


2C)  +  Cl  +  i  Tj 


2C,  +  2C2  +  C,  £  2T, 

3C,  +  2C2  +  C,  s  3T,  (In  this  example,  3T,  =  2T2  so  the  inequality  for  2T2  is  omitted.) 
4Ci  +  3C2  +  C;\  i  T-^ 


If  at  least  one  of  these  is  true,  we  have  satisfied  the  conditions  of  the  theorem  for  i  =  3;  that  is, 
for  task  3's  schedulability. 

Lot  us  now  take  a  closer  look  at  Theorem  2  and  step  through  the  notation.  Each  mT^ 
corresponds  to  a  scheduling  point,  e.g.,  2T,  or  Tj.  If  we  were  applying  Theorem  2  to  the 
sample  problem  of  3  tasks,  there  would  be  3  sets  of  (k,m)  pairs,  one  set  R,  for  each  task  i. 

The  cases  where  i  =  1  or  2  in  the  sample  problem  are  less  interesting  than  i  =  3,  whore  we  are 
determining  the  schedulability  of  the  third  task.  For  i  =  3,  we  will  see  how  the  conditions 
generate  a  set  of  6  (k,m)  pairs.  These  provide  the  subscript  and  coefficient  of  each  of  the 
scheduling  points,  as  follows.  Applying  the  definition  (from  Theorem  2)  of  R,  for ;  =  3,  k  will  take 
on  values  from  1  to  3.  For  each  value  of  k,  some  number  of  m’s  are  generated  that  is  equal  to 
the  number  of  times  task  k  is  scheduled  before  task  /  reaches  its  first  deadline.  The  floor 
operator  finds  this  number. 


•  for  k  =1 ,  m  =1 


which  in  this  case  is  3  because  the  FLCX)R  of  TTT, 

=  FLOOR  of  350/100  =  FLOOR  of  3.5  =  3.  So  m  will  range  from  1  to  3  while  k 
remains  1  -  thus  enumerating  the  (k,m)  pairs  of  (1 ,1 ),  (1 ,2),  and  (1 ,3).  The  values  for 
k  and  m  are  used  for  the  subscript  and  coefficient  of  each  scheduling  point  mT^.  In 
this  case,  we  have  1T„  2Ti,  and  3T,. 
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In  our  example,  FLOOR  (350/150)  =  FLOOR  (2.3)  =  2.  This  enumerates  the  (k.m) 
pairs  (2,1)  and  (2,2),  which  yields  the  scheduling  points  IT:  and  2T:.  This  is  what  we 
would  expect,  since  task  2  is  scheduled  2  times  while  task  3  is  attempting  to  meet  its 
first  deadline. 


•  for  k  =  3;  m  =1 . 


which  produces  the  pair  (3,1)  or  IT,,  the  last  scheduling  point  to  check. 


Together,  the  (k,m)  pairs  generated  by  Theorem  2  yield  all  the  scheduling  points  in  our  sample 
problem,  namely  T,,  2T„  3T,  =  2T2,  Tj,  2T:,  and  Tj.  It  is  at  these  scheduling  points  that  we  will 
check  if  ail  the  work  previously  scheduled  could  have  been  completed.  If  there  is  a  scheduling 
point  at  which  this  is  true,  then  we  will  know  that  task  3  finished  its  work  before  the  deadline 
of  t  =  350  while  accommodating  the  preemption  of  tasks  1  and  2. 


Concentrating  on  the  inequality  expressed  in  Theorem  2,  each  (k,m)  pair  will  produce  a  sum 
of  (multiples  of)  task  execution  times  C|  that  should  have  been  completed  if  all  of  the  required 
deadlines  are  to  be  met  by  that  scheduling  point.  For  example,  as  we  have  already  seen,  the 
(k,m)  pair  of  (1 ,2)  corresponds  to  2T,  and  produces  the  sum  (2C,/2T,)  +  (2CJ2Jj)  +  (C,/2T,), 
which  is  then  checked  for  being  less  than  or  equal  to  1 .  Theorem  2  uses  the  expression 

y  C  ^  \^'^k 
^  JmT^  -f- 

y  =  i  *  ^ 


to  create  that  sum.  Let's  plug  in  the  values  and  see  for  ourselves.  In  this  case  we  have  k=1 
and  m=2.  As  j  goes  from  1  to  i,  which  is  3,  the  expression  becomes  the  following  sum: 


'27, 


[27,1 

^  1 

[27,1 

^  1 

[27,1 

1 

+  Ct 

2  27, 

1 

+  Ct  ^ 

^27, 

1 

and  we  want  to  know  if  that  is  less  than  1 .  We  can  multiply  through  by  mT^,  which  in  this  case 
is  2Ti,  to  obtain  a  simpler  form; 


■27,' 

+  Ct 

'2T^' 

'2T{ 

A 

<27, 
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PKiMing  in  th«  numbers  for  our  exanr^  in  w^ich  the  period  lengths  were  100, 150,  and  350, 
vveoMein 


’2001 

-I-Cj 

2001 

-t-  C3I 

200 

tool 

150  1 

350 

^200 


which  reduces  to 

2C|  +  2C2  +  C3  ^  200 

If  we  were  to  perform  the  above  numeric  substitutions  for  the  other  5  (k.m)  pairs  for  task  3,  i.e., 
when  i  =  3,  we  would  produce  the  5  irrequaiities  (2  of  them  are  exactly  the  same)  listed  earlier 
in  this  section.  If  any  of  the  5  inequalities  is  true,  we  know  that  there  is  a  scheduling  point  by 
which  task  3  is  able  to  meet  its  first  deadline,  while  accommodating  preemption  from  the  other 
tasks.  We  therefore  conclude  that  task  3  is  schedulable. 

Thus  we  see  that  each  (k.m)  pair  provides  the  subscript  and  coefficient  of  a  scheduling  point 
and  corresponds  to  a  particular  sum  involving  that  scheduling  point.  Since  a  given  task  set  will 
have  n  sets  of  (k.m)  pairs,  there  will  actually  be  n  sets  of  sums  produced,  each  involving  the 
scheduling  point  indicated  by  the  associated  (k.m)  pair.  The  “min”  in  the  algebraic  expression 
of  Theorem  2  finds  the  smallest  sum  for  which  the  inequality  holds.  It  is  necessary  to  be  sure 
only  that  there  is  at  least  one  for  each  task. 
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Sample  Homework  Assignments  and  Exam 


Homework  Assignment  #1 

Homework  Assignment  #1  Solution  and  Comments 

Homework  Assignment  #2 

Homework  Assignment  #2  Solutions  and  Comments 
Exam 

Exam  Solutions  and  Comments 


Permission  is  granted  to  make  and  distribute  copies  of  the  following  Sample  Homework  Assignments  and  Exam 
for  noncommercial  purposes. 


Homework  Assignment  #l 


Consider  the  following  tasks; 

Name  Execution  time  Period  length 

X  10  100 

P  20  50 

S  20  150 

G  25  80 

1.  List  them  in  rate  monotonic  order  with  the  highest  priority  hrst. 

In  the  following  problems,  when  you  are  asked  to  “use  Theorem  J,"  write  the  expression 
algebraically,  then  write  it  again  plugging  in  numbers.  If  you  are  asked  to  “use  Theorem  2“ 
show  a  timeline  (use  the  blank  one  provided  and  label  it  regarding  which  numbered  problem  it 
is  answering)  and  also  state  your  conclusion  specifically.  For  example,  ‘Theorem  2  is  satisfied 

for  task _ at  the  scheduling  point  t  = _ .”  If  you  are  asked,  “are  these  tasks  schedulableT 

use  Theorem  I  first.  If  that  is  sufficient  to  answer  the  questions,  fine.  If  not,  then  use  Theorem 
2  as  described  above  for  each  task.  If  you  are  asked  to  use  the  extended  model  for  Theorem  1 , 
use  the  expression  that  includes 

preemption  factors  +  task  +  blocking  factors  <  U(n)  where  you  have  selected  n  correctly. 

2.  Based  on  this  ordering,  are  the  tasks  with  the  two  highest  priorities  schedulable? 

3.  Are  all  4  tasks  schedulable?  If  not,  why  not? 

4.  Change  the  problem  as  follows:  assume  that  task  S  executes  as  an  interrupt  instead  of  its 
rate  monotonic  priority.  Use  Theorem  2  to  show  whether  the  4  tasks  are  schedulable.  If  not, 
which  task(s)  miss(es)  the  deadline(s)? 

5.  Based  on  the  change  you  made  in  problem  #4,  change  the  problem  again:  assume  S  is  a  task 
that  involves  10  units  of  interrupt  processing  and  10  units  of  application  processing.  Use  the 
extended  model  for  Theorem  1  to  determine  if  this  solves  the  schedulability  problem. 

6.  Suppose  the  conditions  of  #5  hold  for  S.  Where  would  you  first  direct  your  attention  in  an 
attempt  to  make  this  task  set  schedulable?  That  is,  which  task  contributes  the  most  to  the  fact 
that  this  set  is  not  schedulable? 

7.  What  does  it  mean  if  a  task  set  of  n  tasks  fails  both  Theorem  1  and  Theorem  2  (assuming 
there  is  no  room  for  improvement  of  execution  times)  but 


"  C 

8.  What  does  it  mean  if  V  _f  >  1 7 

^  Ti 
i=  I  ' 
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Use  the  following  timelines  as  needed. 


50 

100 

150 

20 

80 

_1_ 

160 

J _ 

0 


50 


too 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 

_L 


200 


0 


50 


100 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 

_L 


200 


0 
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50 


100 


80 


150 


160 
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200 
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50 


100 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 


200 


0 


50 


100 


80 


150 


160 

J_ 


200 
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Solutions  and  Comments 
Homework  Assignment  #1 


1 .  Rate  monotonic  order  is  P,  G,  X,  S 


2.  Task  P: 

Cp/Tp<U(l) 

20/50  =  . 4  <  1.0 

schedulable 

Task  G: 

Cp/Tp  +  Cg/Tg  <  U(2) 

20/50 +  25/80  =  .7 13  <.828 

schedulable 

3.  Task  P: 

Cp/Tp  <U(1) 

20/50  =  . 4  <  1.0 

schedulable 

Task  G: 

Cp/Tp  +  Cg/Tg  <  U(2) 

20/50 +  25/80  =  .7 13  <.828 

schedulable 

Task  X: 

Cp/Tp  +  Cg/Tg  +  Cx/Tx  <  U(3) 

20/50  +  25/80  +  10/100  =  .813  >  .779 

not  schedulable 

Task  S: 

Cp/Tp  +  Cg/Tg  +  Cx/Tx  +  Cs/Ts  <  U(4) 

20/50  +  25/80  +  10/100  +  20/150=  .947  >  .756  not  schedulable 

Theorem  2  is  satisfied  at  scheduling  point  T=150 
Task  X  completes  execution  at  t  =  135 
Task  S  completes  execution  at  t  =  150 

Therefore,  all  4  tasks  are,  in  fact,  schedulable. 
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4. 


X 

. 

10 

50  « 

0 

I 

X)  1 

50 

Task  G  completes  its  first  execution  at  t  =  i 

5,  missing  its  first  deadline  at  t  =  80 

Task  X  completes  its  first  execution  at  t  =  140,  missing  its  first  deadline  at  t  =  100 
Therefore,  tasks  G  and  X  are  not  schedulable. 


5.  (Task  P) 

CpA'p  +  Csi/Tp  <  U(  1 ) 

20/50+  10/50  =  .6<U(1) 

OK 

(Task  G) 

Cp/Tp  +  Cg/Tg  +  Csi/Tg  <  U(2) 

20/50  +  25/80  +  10/80  =  .838  >  U(2) 

not  OK 

(Task  X) 

Cp/Tp  +  Cg/Tg  +  Cx/Tx  +  Csi/Tx  <  U(3) 

20/50  +  25/80  +  lO/lOC  +  lO/lOO  =  .913  >  U(3) 

not  OK 

(Task  S) 

Cp/Tp  +  Cg/Tg  +  Cx/Tx  +  Cs/Ts  <  U(4) 

20/50  +  25/80  +  10/100  +  20/150  =  .946  >  U(4) 

not  OK 

6.  P  due  to  high  utilization,  or  G  if  justified  based  on  timeline. 

7.  There  may  be  an  ad  hoc  solution,  but  there  is  no  algorithmic  solution. 

8.  The  task  set  is  not  schedulable. 
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Comments  on  Homework  Assignment  #1 


Question  # 
1 

2 

3 

4 

5 


6 

7 

8 


Comment 
No  comments 

No  comments 

Although  Theorem  1  does  not  find  task  X  and  task  S  to  be 
schedulable,  applying  Theorem  2  finds  all  4  tasks  to  be  schedulable. 

When  task  S  runs  as  an  interrupt,  it  acts  as  blocking  to  the  other  three 
tasks,  and  will  now  apf)ear  as  a  blocking  term  in  the  other  3  tasks’ 
schedulability  tests.  Task  P  can  still  meet  its  deadline,  in  spite  of  the 
blocking.  However,  task  G  and  task  X  now  fail  to  meet  their  deadlines. 
Note  that  the  Theorem  1  test  for  task  S  is  now  Cs/Ts  <  U(l). 

When  task  S  is  broken  up  into  10  msec  of  interrupt  processing  and 
10  msec  of  application  processing,  the  10  msec  of  interrupt  processing 
continue  to  block  the  other  3  tasks.  However,  the  10  msec  of 
application  will  be  preempted  by  the  other  3  tasks.  The  resulting 
change  is  that  task  G  still  fails  Theorem  1,  but  now  passes  Theorem  2. 
Task  X  still  fails  both  tests.  Task  S  now  fails  Theorem  1 ,  but  passes 
Theorem  2. 

One  approach  to  improve  schedulability  is  to  find  the  tasks  that  have 
the  highest  utilizations,  particularly  those  that  impact  the  rest,  and 
reduce  their  computation  times  to  reduce  total  utilization. 

If  Theorem  1  results  in  a  utilization  above  the  bound  but  less  than 
100%,  we  know  that  there  is  actually  enough  CPU  capacity  to  perform 
all  the  required  computation.  However,  worst-case  task  phasings  may 
cause  tasks  to  miss  deadlines  intermittently. 

There  is  too  much  computation;  the  CPU  does  not  have  the  capacity  to 
perform  all  the  work,  no  matter  what  scheduling  approach  is  used. 
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Homework  Assignment  #2 


Please  use  the  timeline  templates  below  for  answering  timeline  questions.  Label  each  timeline 
carefully  so  that  it  is  clear  which  timeline  pertains  to  which  question.  Cutting  up  the  templates 
or  other  modifications  are  encouraged  as  long  as  you  present  the  information  clearly. 


RMA  Homework  Assignment  #2 


1 


1.  Given  the  following  information  about  3  periodic  tasks: 


Task  Execution  Time  Period 

a  1  5 

b  2  7 

c  1  4 


Utilization 


a)  What  is  the  total  utilization  of  the  set? 

b)  Is  the  set  of  tasks  schedulable? 

c)  Identify  the  highest  and  lowest  priority  task  when  using  rate  monotonic  priorities. 

d)  Assuming  that  the  tasks  are  assigned  rate  monotonic  priorities,  draw  the  timeline 
(starting  all  3  tasks  at  time  0). 

e)  Add  1  unit  to  the  execution  time  of  task  b.  Calculate  the  total  utilization  of  the  resulting 
task  set.  Is  the  new  task  set  schedulable  according  to  Theorem  1  ?  Draw  the  timeline  for 
this  new  task  set. 


2.  Assess  the  schedulability  of  the  following  task  set. 


Task  a: 

Ci  =  l 

Ti  =  5 

Task  b: 

C2  =  3 

T2  =  6 

Taskc: 

C3  =  3 

73=14 

Given  the  following  tasks: 

c 

I 

Prioritv 

Taskxj 

10 

50 

high 

Task  T2 

10 

75 

medium 

Task  X3 

40 

100 

low 

Interrupt 

15 

200 

a)  Build  a  schedulability  model  for  the  task  set. 

b)  Given  (a),  now  assume  that  T3  is  composed  of  2  sections,  and  T35.  Execution  times 
are  30  and  10,  respectively.  Section  13^  is  non-preemptible  and  non-interruptible.  Set  up 
the  new  schedulability  model. 

c)  Perform  the  numerical  test.  Theorem  2,  on  task  T|. 

d)  Consider  breaking  up  the  non-preemptible  section  of  13  into  2  or  more  smaller,  non- 
preemptible  blocks  of  time  (for  example:  C3a.i=10  and  C3a.2=20).  What  is  the  new 
schedulability  inequality  for  taskij?  What  is  the  impact  on  the  schedulability  of  tasktj? 
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Solutions  and  Comments 
Homework  Assignment  #2 


Task  a: 

C,=l 

T,=5 

f/,=0.2 

Task  b: 

C2=2 

72=7 

f/2=0.286 

Task  c: 

C3=l 

II 

C/3=0.25 

Total  utilization:  73.6% 

lb)  Yes.  73.6%  <  U(3)  =  77.9% 

lc)  Priority  order  is  c,  a,  b. 

ld) 


0  1 

4 

5 

8 

M 

0 

i 

2 

5  6 

b 


0 

2  4 

7 

le) 

Task  a: 

C,=l 

7, =5 

C/,=0.2 

Task  b: 

C2=3 

72=7 

6/2=0.429 

Taskc: 

C3=l 

II 

6/3=0.25 

Total  utilization:  87.9  >  U(3) 

=  77.9%.  It  is  not  schedulable  by  Theorem  1 

■i 

0  1 

4 

5 

8 

a 


0 


0  2  4 

6  1 

COMMENTS:  Note  that,  although  the  total  utilization  factor  of  the  new  task  set  is  greater 
than  the  bound  in  Theorem  1,  it  is  still  schedulable.  The  bound  in  Theorem  1  is  sufficient  but  it 
is  not  necessary. 
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Task  a: 

C,=l 

7, =5 

Task  b: 

C2=3 

72=6 

Task  c; 

C3=3 

73=14 

Utilization  for  tasks  a  and  b  is  .700  <  U(2)  =  .828 
Utilization  for  tasks  a,  b,  and  c  is  .914  >  U(3)  =  .779 
COMMENT;  The  numerical  test  is  necessary  for  task  c. 


Task  c 


A  B 


D 


COMMENT: 

(A)  1C,  +  IC2  +  IC3  <  ir,  7>5 

(B)  2Cj  +  IC2  +  IC3  <  172  8  >6 

(C)  2Ci  +  2C2  +  IC3  <272  11  >  10 

(D)  3Ci  +  2C2  +  IC3  <  2T2  12=  12 

(E)  3C,  +  3C2  +  IC3  <  173  15>  14 


If  any  of  the  above  formulas  is  true,  we  can  conclude  that  task  c  will  succeed. 
“D”  is  true,  therefore  task  c  is  guaranteed  to  meet  its  time  requirements. 
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3a)  KEY:  (P)  =  Preemption;  (B)  =  Blocking 


X. 


<  1 


COMMENTS: 

Under  Theorem  1,  task  T3  is  not  schedulable: 

Ti:  .2  +  .3  <  1 

X2-.  .2  +  .133  +  .2  <  .828 

T3:  .2  +  .133  +  .4  +  .15  <  .799  FAILS  TEST 

T4:  .075  <  1 

However,  under  Theorem  2,  X3  is  schedulable: 

T3:  Cj  +  C2  +  C3  +  Cj  <  50  10  +  10  +  40  +  15  >  50 

2Ci  +  C2  +  C3  +  Ci  <  75  20+  10  +  40+  15  >75 

2Ci  +  2C2  +  C3  +  Ci  <  100  20  +  20  +  40  +  15  <  100  True 

Task  T3  completes  its  work  before  the  end  of  its  first  period  and  thus  is  schedulable. 
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(B)  (B) 


^1  C’Ba 


(P) 

C,  C,  c  c 


(B)  (B) 

3a 


T2:  ^  +  ^  +  ^  +  ^  <  2(2^-l  ) 
/,  /j  ^2  ^2 


(P)  (P) 

■■  r 

1  +  13 

'i  7-2 


(B) 


c,  c,  c,  c. 


^3(23-,) 


(B) 

C.  <^33 

T  :  S  1 

‘  7-,  r. 


COMMENTS; 

The  task  set  is  not  schedulable  under  Theorem  1: 

ti :  .2  +  .3  +  .6  >  1  FAILS  TEST 

X2:  .2  +  .  1 33  +  .2  +  .4  >  .828  FAILS  TEST 

t3:  .2  +  .133  +  .4  +  .15  >  .779  FAILS  TEST 

Ti.- .075  +  .15  <  1.0 

Notice  that,  although  the  period  of  X3  is  shorter  than  that  of  Xj,  X3a  is  modeled  as  blocking 
rather  than  preemption.  This  is  because  X3a  can  block  Xj  once  at  most  during  Xj’s  period. 


Solutions  and  Comments  to  RMA  Homework  Assignment  #2 


4 


3c) 


Tj:  Cj  +  C\  + 


FAILS  TEST 


COMMENTS: 

Task  T)  also  fails  the  numerical  test: 

10+  15 +  30  >50 


Xi  is  unable  to  meet  its  first  deadline  under  worst-case  conditions  and  is,  therefore,  stilt  not 
guaranteed  to  be  schedulable. 

Tasks  X2  and  T3,  however,  do  pass  the  numerical  test,  completing  their  work  under  worst-case 
conditions  at  or  before  their  first  deadlines; 

X2'‘  Cj  +  C2  +  Cj  +  C32  <  50  10  +  10  +  15  +  30  >  50 


2Cj  +  C2  +  Cj  +  C3jj  <  75 


20+  10+  15  +  30  =  75 


X3:  C|  +  C2  +  C3  +  Cj  <  50 


10+  10  +  40+  15  >50 


2C\  +  C2  +  C3  +  Cj  <  75 


20+  10  +  40+  15  >75 


2C[  +  2C2  +  C3  +  Cj  <  100 


20  +  20  +  40+  15  <  100 


(B)  (B) 

C,  C,  MAX(C,,_,C5„.j) 

- f; - ^  ‘ 


COMMENTS: 

Although  perfect  preemption  may  not  be  possible,  “partial”  preemption  can  be  achieved  by 
breaking  up  non-preemptible  code  into  several  smaller  segments  of  non-preemptible  code. 

Using  this  approach  in  this  problem,  if  Xj  is  blocked  by  X3a.i,  it  will  still  have  the  opportunity 
to  execute  before  X3a.2  since  it  has  higher  priority. 

At  worst,  Xj  will  be  blocked  by  the  longest  of  the  smaller  non-preemptible  segments. 
Therefore,  the  blocking  term  in  the  schedulability  test  for  task  Xj ,  caused  by  task  X3,  is  the  MAX 
(or  the  longest)  of  X3’s  non-preemptible  segments. 

Now,  task  X]  passes  the  schedulability  test  and  is  guaranteed  to  meet  its  deadlines: 

.2  +  .3  +  .4  <  1 
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Exam 


Consider  the  following  set  of  tasks  with  the  attributes  shown.  Use  the  expanded  (extended) 
schedulability  model  to  determine  if  each  task  is  schedulable.  Use  a  clear  algebraic  notation  to 
represent  what  you  are  interpreting  as  preemption  factors,  the  task  itself,  and  blocking  factors 
before  “plugging  in  numbers.”  Use  a  timeline  to  see  if  Theorem  2  gives  you  additional 
information.  Label  it  clearly. 

Task  A:  =10  T^=80  The  last  5  msec  of  execution  requires  exclusive  access  to  a 

resource  that  is  shared  with  task  D. 

Task  B:  Cb=20  Tb=90 

Task  C;  C(;;=20  Tc=150  Interrupt-driven,  ail  processing  done  by  interrupt  service 

routine  (not  preemptible). 

Task  D:  Cd=20  T[)=200  Executes  for  10  msec;  then  requires  5  msec  of  exclusive 

access  to  resource  that  is  shared  with  task  A;  then  frees 
resource  and  continues  for  5  msec  more.  Task  D  has  a 
preperiod  deadline  of  10  msec. 

Task  E:  ^£^=15  T£=250  Interrupt-driven.  Interrupt  processing  is  5  msec  and 

application  processing  is  15  msec. 

Task  F:  Cp=30  aperiodic  The  aperiodic  events  that  take  30  msec  to  process  can 

occur  every  3(X)  to  500  msec. 

Note:  Unless  otherwise  stated,  assume  deadlines  are  at  the  end  of  the  period.  Also  assume  that 
all  application-level  processing  is  assigned  priorities  rate  monotonically. 


( 


RMA  Exam 

» 


Solution  to  Exam  Question 

Diagram  of  Tasks  and  Interaction  with  Shared  Resources 


^Ei=5 

Cea=15 

Tp=250 


/  Cf=30  7 
/  Tf=300  / 
/  (worst  case)  / 


Cx  is  computation  time  for  task  X 
Tx  is  period  of  task  X 

is  computation  time  of  task  X  that  runs  at 
an  interrupt  priority 

^Xa  is  computation  time  of  task  X  that  runs  at  an 
application-level  priority 

^Xs  is  computation  time  during  synchronization 

with  a  shared  resource  (i.e.,  critical  section  of  task  X) 

Dx  is  task  X’s  preperiod  deadline 
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Assuming  that  all  application-level  processing  is  prioritized  rate  monotonically: 

E  =  Execution 
B  =  Blocking 
P  =  Preemption 

TASK  A 


Cr  Cn  Cp 
^  ^A  ■ 


TASKB 


TASKC 


10  +  20  ^  2^40^  Q5 

80  80  80  80  80 


'  r  r 

^  +  y?  +  ^'  +  ^'  S  0.828 

^A  ^B  ^B 


10  +  20  ^  5^^^^^  0.125  +  0.5  =  0.625  ok 

80  90  90  90  80  90 


'Cc  Cp 

<  0.779 


20  .  5  25 

150^1^  =  150  =  ®-^^^ 
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TASKD 


10  ^ 
80  "^90 


P 


20  20  10  +  5 

150  ■^200  200 


0.756 


=  0.125+0.223  +  0.134  +  0.10  +  0.075  =  0.657 


OK 


TASKE 


_ P 

10  20  20 

80  90  150 


E 

^  ^  2d 

+  ^  +  ^  =  0.125  +  0.223  +  0.134  +  0.1  +0.08  = 


0.662  <  0.743 


OK 


TASKF 


_ P _  E 

^7o  20  lo  ^0^  ^ 

80  90  150  200  250  3W  " 

0.125+0.223  +  0.134  +  0.1+0.08  +  0.1  =  0.762  >0.734 


NOT  OK 
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Test  for  task  F  stops  here 


F  completes  its  30  msec  of  execution  at  t  =  1 50,  which  is  before  its  first  deadline  of  300  msec.  Therefore, 
it  is  schedulable. 
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Notice  if  yo  id  Theorem  2  for  A; 


Worst  case  is  not  when  they  all  line  up  at  T=0.  The  worst  case  is  when  D  has  just  started  its  critical 
section  before  A  starts  running.  Then  C  and  E  are  able  to  interrupt  task  A  s  processing,  and  B  blocks 
while  A  is  in  its  critical  section. 


Attempts  to  lock  resource 

hilt  i«  hirw-keH  Besins  critical  section 


InterruDt 


I  Interrupt-level  processing 
I  Application-level  processing 
^  Critical  section 


Worst-case  completion  for  A  equals 

C  C  C  C =  10 -I- 20  +  20  +  5  +  5  =  60 

LJ  I _ I 

E  B 
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Comments  on  Exam  Question 


To  determine  the  schedulability  of  the  entire  task  set.  because  there  are  sources  of  blocking, 
we  will  have  to  test  each  task  individually.  We  will  produce  a  schedulability  model  (or,  a 
schedulability  inequality)  for  each  task.  All  interrupt-level  processing  will  be  included  as 
blocking  to  higher  priority  tasks.  But  remember  that,  to  lower  priority  tasks,  interrupt 
processing  is  simply  preemption.  For  example,  task  C’s  processing  is  blocking  to  task  A,  but 
preemption  to  task  D. 

The  diagram  gives  the  task  characteristics  and  shows  the  synchronization  of  task  A  with  task 
D  in  accessing  the  resource.  If  we  assume  that  no  special  synchronization  protocol  is  used,  we 
can  say  the  following  rules  apply: 

•  The  task  with  the  highest  priority  in  the  ready  queue  takes  the  CPU. 

•  A  task  that  has  grabbed  a  resource  and  is  in  its  critical  section  may  be  preempted  by  a 
higher  priority  task  that  does  not  need  the  resource. 

•  If  a  task  gets  blocked  when  trying  to  grab  a  resource  that  is  already  locked,  it  is 
placed  on  the  wait  queue  until  the  scheduler  is  signaled  that  the  resource  is  free  (at 
which  time  it  is  again  placed  on  the  ready  queue). 

•  While  that  task  is  in  the  wait  queue,  the  task  with  the  next  highest  priority  in  the 
ready  queue  gets  the  CPU. 

Following  these  assumptions,  it  is  possible  for  task  D  to  enter  its  critical  section,  then  get 
preempted  by  task  A  until  task  A  tries  to  use  the  resource,  at  which  time  it  is  blocked.  Task  A 
will  be  put  on  the  wait  queue  until  task  D  finishes  its  critical  section.  If  in  the  meantime  task  B 
or  task  C  is  ready  to  run;  it  will  preempt  task  D’s  execution  in  the  critical  section  and  take 
away  the  CPU,  With  this  consideration,  task  B  and  task  C  will  not  experience  blocking  from 
task  D.  Only  task  A  can  experience  blocking  caused  by  the  synchronization. 

Note  that  several  operating  systems  and  runtimes  follow  a  no-preemption  protocol  for 
synchronization.  That  is,  when  a  task  uses  a  resource  and  enters  a  critical  section,  it  cannot  be 
preempted  by  another  task,  even  of  higher  priority.  That  execution  time  in  the  critical  section 
would  apply  to  all  tasks  of  higher  priority,  even  those  that  do  not  use  the  resource.  The 
solution  given  assumes  that  the  operating  system  allows  preemption,  as  well  as  interrupts, 
during  synchronization  (that  is,  while  in  a  task’s  critical  sections). 

However,  several  synchronization  protocols  exist,  such  as  the  priority  inheritance  protocol 
and  the  priority  ceiling  protocol,  which  can  reduce  the  blocking  effect  on  higher  priority  tasks. 
For  more  information  on  these  protocols,  see  the  A  Practitioner’s  Handbook  for  Real-Time 
Analysis  or  the  papers  listed  in  the  bibliography  that  cover  them. 


RMA  Exam  Solution  and  Comments 


Let  us  now  set  up  the  schedulability  model  for  each  task. 

TASK  A: 

Task  A  must  accommodate  its  own  execution,  plus  the  following  sources  of  blocking: 

•  Interrupt-driven  processing:  all  of  task  C,  and  interrupt-driven  portion  of  task  E. 

•  Critical  sections  of  tasks  that  share  a  resource;  critical  section  of  task  D 

•  Processing  of  medium-priority  tasks  that  do  not  share  the  resource:  all  of  task  B. 

Notice  that  the  same  situation  exists  here  that  was  in  the  airline  tracking  system 
described  in  the  RMA  video.  While  task  A  is  blocked  out  by  task  D’s  execution  in  the 
shared  resource,  it  could  be  further  delayed  by  preemption  from  task  B.  Consider  a 
hypothetical  case  where  there  are  several  medium-priority  tasks  like  task  B  that  can 
take  turns  delaying  task  D’s  critical  section.  This  would  be  a  potential  unbounded 
priority  inversion. 

TASK  B: 

Task  B  must  accommodate  preemption  from  task  A,  its  own  execution,  plus  blocking 
from  tasks  C  and  E. 

TASK  C: 

Because  task  C  runs  at  interrupt  level,  it  essentially  runs  at  a  higher  runtime  priority 
than  any  other  task.  Only  task  E’s  interrupt-level  processing  could  delay  task  C,  if 
task  E’s  interrupt- level  processing  started  before  task  C  started.  Therefore  task  C  must 
accommodate,  in  the  worst  case,  its  own  execution  plus  the  blocking  from  task  E. 

TASK  D: 

To  task  D,  task  C  looks  like  a  preemptor.  Therefore  task  D  accommodates  preemption 
from  tasks  A,  B,  and  C.  Then  one  must  add  in  its  own  execution,  plus  blocking  from 
task  E’s  interrupt  processing.  Remember  that  task  D’s  preperiod  deadline  is  tacked  on 
as  additional  blocking.  Also  notice  that  the  critical  section  of  task  A  is  already 
accounted  for  in  all  of  task  A’s  execution  time,  which  can  preempt  task  D. 

TASK  E: 

Task  E’s  schedulability  model  is  straightforward.  It  must  accommodate  preemption 
from  all  of  the  higher  priority  tasks  and  its  own  execution.  It  experiences  no  blocking. 

TASK  F: 

No  requirements  for  response  time  for  aperiodic  events  is  given,  so  we  assume  that 
computation  must  be  completed  by  the  occurrence  of  another  aperiodic  event.  If  we 
assume  that  events  occur  at  worst-case  intervals  (that  is,  every  3(X)  msec),  we  can 
analyze  the  task  as  a  periodic  task  with  a  period  of  300.  Therefore  it  is  scheduled  as  the 
lowest  priority  task,  and  it  must  accommodate  preemption  from  all  other  tasks  plus  its 
own  execution  time.  This  is  the  only  task  that  fails  Theorem  1.  However  applying 
Theorem  2  shows  it  to  be  schedulable. 

Therefore  all  tasks  in  this  task  set  are  schedulable. 
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One  final  point  to  notice  is  on  the  issue  of  worst-case  line-up  of  task  executions.  We  find  the 
worst  case  by  the  set  of  circumstances  that  would  allow  all  the  preemption  and  blocking 
included  in  a  task’s  schedulability  formula.  In  this  particular  example,  the  worst  case  for 
task  A  is  not  when  all  tasks  are  ready  to  execute  at  t=0.  Worst  case  for  task  A  is  when  D  has 
completed  the  first  part  of  its  processing  and  has  just  started  its  critical  section;  then  task  A  is 
ready  to  run,  but  gets  blocked  by  task  C  and  task  E’s  interrupt  processing.  After  those  are 
completed,  task  A  will  still  have  to  wait  for  task  D  to  finish  its  critical  section,  which  in  the 
meantime  can  be  preempted  by  task  B.  This  situation  can  be  seen  in  the  timeline  at  the  end  of 
the  solution. 
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Order  Form  for  Supporting  Materials  to: 

Rate  Monotonic  Analysis  for  Real-Time  Systems 


Use  this  form  to  order  the  teaching  materials  that  support  this  EM:  the  required  videotape,  An 
Introduction  to  Rate  Monotonic  Analysis,  the  optional  diskette  with  presentation  slides  and 
non-supported  RMA  programs 

To  receive  the  videotape,  as  well  as  the  optional  diskette,  complete  this  form  and  return  it  with 
payment  to 


Education  Program 
Software  Engineering  Institute 
Carnegie  Mellon  University 
Pittsburgh.  PA  15213-3890 

Checks  should  be  made  payable  to  Carnegie  Mellon  University. 


n  Videotape  An  Introduction  to  Rate  Monotonic  Analysis  $50 

n  Macintosh  Diskette  with  slides  and  RMA  programs  (MOA  required)  $10 

Total  enclosed  _ 


Send  to 

Name 

Title 

School/Company 

Address 

City/State/Zip 

Telephone 

e-mail 


MEMORANDUM  OF  AGREEMENT 


1.  I/we  the  undersigned,  on  behalf  of  the  Requesting  Organization  listed  below  (hereafter 
referred  to  as  the  "Requester"),  request  release  of  USAF  software  and  understand  and 
agree  to  the  following: 

a.  NON-DISCLOSURE  AGREEMENT  (Applies  to  commercial  components  with  lim¬ 
ited  or  restricted  rights  accessed  through  Government  reuse  libraries).  The  Requester  re¬ 
quests  some  or  all  of  the  following  from  the  Software  Engineering  Institute:  data,  technical 
data,  computer  software  computer  software  documentation,  computer  programs,  source 
code,  firmware,  and  other  informahon  of  like  kind,  type  or  quality,  either  commercial  or 
non-commercial,  all  of  which  may  be  subject  to  limited  rights,  restricted  rights.  Govern¬ 
ment  Purpose  license  rights,  patents,  copy  rights,  trade  secret  rights,  or  other  confidenhal 
or  rietary  constraints  (collectively,  the  "Data").  In  consideration  therefore,  the  Re- 
qi  agrees: 

1)  That  the  Data  shall  be  used  only  for  Goverrunent,  non-commercial  or  non¬ 
profit  purposes; 

2)  To  strictly  abide  by  and  adhere  to  any  and  all  restrictive  markings  placed  on 
the  Data,  and  the  Requester  shall  not  knowingly  disclose  or  release  the  Data  to 
third  partied  who  are  not  engaged  in  work  related  to  Government,  non-commer¬ 
cial,  or  non-profit  purposes; 

3)  That  any  restrictive  markings  on  the  Data  shall  be  included  on  all  copies, 
modifications,  and  derivative  works,  or  any  parts  or  portions  thereof,  in  any  form, 
marmer  or  substance,  which  are  produced  by  the  Requester  including  but  not  lim¬ 
ited  to  incorporation  of  the  Data  into  any  other  data,  technical  data,  computer  soft¬ 
ware,  computer  software  documentation,  computer  programs,  source  code,  or 
firmware,  or  other  information  of  like  kind,  type  or  quality.  In  all  such  events.  Re¬ 
quester  shall  clearly  denote  where  such  Data  initiates  and  concludes  by  use  of  an¬ 
notations  or  other  standard  markings. 

b.  WAVER  OF  WARRANTIES  AND  LIMITATIONS  OF  DAMAGES  AGREEMENT. 
The  Requester  and  the  Approving  Authority  agree  that: 

1)  No  guarantees,  representatior\s,  or  warranties  either  expresses  or  implied 
shall  be  construed  to  exist  in  any  language,  provision,  or  term  contained  in  these 
materials  or  in  any  other  documentation  provided  herewith  (all  such  items  are  col¬ 
lectively  referred  to  as  the  "Agreement"),  and  furthermore,  the  releasing  organiza¬ 
tion  di^aims  and  the  Requester  waives  and  excludes  any  and  all  warranties  of 
merchant  ability  and  any  and  all  warranties  of  fitness  for  any  particular  purpose; 

2)  The  Requester  sheill  obtain  from  the  releasing  orgaruzation  all  of  the  "Data" 
(Defined  in  the  Non-Disclosure  Agreement  above),  or  any  other  products  or  ser¬ 
vices  contemplated  by  the  Agreement,  in  an  "as  is"  condition. 

c.  The  Requester's  use  of  the  Data  shall  not  prevent  the  Government  from  releasing  the 
Data  at  any  point  in  the  future. 

d.  The  Requester  shall  not  offer  the  released  Data  or  any  modified  version  thereof  for 
resale  to  the  Government,  in  whole  or  as  part  or  subpart  of  a  Government  deliverable, 
without  explicitly  stating  that  he  is  doing  so  by  providing  certification  docvimentation 
(e.g..  Section  K  of  the  Government  Solicitation)  to  the  contracting  officer  before  contract 
award. 
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e.  The  Requester  may  use  the  released  Data  in  a  contract  with  the  Government,  but  un¬ 
derstands  that  the  Government  shall  not  pay  the  Requester  for  rights  of  use  of  such  Data 
in  performance  of  Government  contracts  or  for  the  later  delivery  to  the  Government  of 
such  Data.  The  Requester  may  be  entitled  to  compensation  for  converting,  modifying,  or 
enhancing  the  Data  into  another  form  for  reproduction  and  delivery  to  the  Government, 
if  authorized  under  a  contract  with  the  Government. 

f .  The  Requester  is  not  entitled  to  any  released  Data  that  are  subject  to  national  defense 
security  classification  or  the  proprietary  rights  of  others.  The  Requester  shall  report 
promptly  the  discovery  of  any  such  restricted  Data  to  the  USAF  release  approving  author¬ 
ity  below,  and  will  follow  all  instructions  concerning  the  use,  safeguarding,  or  return  of 
such  Data.  The  Requester  shall  not  copy,  or  make  further  study  or  use  of,  any  released 
Data  later  found  to  be  subject  to  such  restrictions. 

g.  As  required,  the  Requester  shall  be  responsible  for  compliance  with  any  proscrip¬ 
tions  on  foreign  disclosure  of  the  released  Data  (contained,  for  example,  in  the  [department 
of  State  International  Traffic  in  Arms  Regulations  or  the  Department  of  Commerce  Export 
Administration  Regulations). 

h.  There  may  be  a  fee  to  cover  the  copying  and  shipping  of  the  Data  and  any  documen¬ 
tation. 

i.  The  Requester  and  the  Approving  Authority  intend  that  all  agreements  under  this 
Memorandum  of  Agreement  shall  be  governed  by  the  laws  of  the  United  States  of  Amer- 
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